Privacy Policy

Order3 is available today. This Privacy Policy describes how we handle personal information today, while the product, integrations, and security posture continue to evolve alongside operators. The substantive commitments below, what we collect, how we use it, who we share it with, and how to reach us, apply now. The policy may be revised before general availability, and we will date the changes and notify active workspaces of material updates. This page is not a substitute for advice from your own privacy or compliance counsel; if you need a signed agreement before sharing data, contact us and we will work with you.

We collect information you provide directly, email address, name, company, and inventory context you share when you sign up, request a demo, or fill out a form on this site or in the product. We collect information automatically when you visit order3.com or the product: IP address, device and browser type, pages viewed, referrers, and similar standard web analytics signals. Inside the product, we process inventory records (items, locations, counts, movements, supplier and order data) you create, import, or sync. We do not knowingly collect information from children, and we do not buy personal data from data brokers.

We use personal information to run the marketing site and product, respond to sales and support requests, send transactional and operational email, prevent abuse, comply with law, and improve Order3. We use aggregated and de-identified analytics to understand how the site and product are used. We do not sell personal information. We do not use customer inventory data to train external models. AI features in the product operate on your workspace data to answer questions, prepare drafts, and surface anomalies, within the scope you have authorized, and we publish what changes when those scopes evolve.

We use a small set of vendors to host Order3, send email, monitor errors, run web analytics, and operate sales and support tooling. Each is bound by a written agreement and reviewed before we route customer data to it. The current category list, hosting, web analytics, error monitoring, transactional email, and support/CRM, lives at /legal/sub-processors. We will name specific sub-processors and a change-notification process there as the product matures. International transfers, where applicable, rely on standard contractual clauses or equivalent safeguards.

Depending on where you are, you may have rights to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. To exercise any of these, email privacy@order3.com from the address tied to your account or workspace, and we will verify and respond within a reasonable window, typically 30 days. You can also opt out of marketing email through any unsubscribe link. If we cannot resolve a concern, you may have the right to contact your local data protection authority.

We retain personal information for as long as it is needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. We delete or de-identify it when those purposes are complete. Active workspace data is retained for the life of the workspace and a reasonable post-cancellation window for export. To make a request, ask a question, or report a privacy concern, email privacy@order3.com. For security disclosures, email security@order3.com.